Signify Holding B.v.

Philips Lighting Holding B.v.

Koninklijke Philips Corporation N.v.

Arm Limited

Tridonic Gmbh Co. Kg

Sandeep Shankaran Kumar

Ashish Vijay Pandharipande

Oscar Garcia Morchon

Ludovicus Marinus Gerardus Maria Tolhuizen

Sye Loong Keoh

Bozena Erdmann

Mark Henricus Verberkt

Theodorus Jacobus Johannes Denteneer

Hongming Yang

Hannes Tschofenig

Petrus Johannes Lenoir

Fulong Ma

David Ricardo Caicedo Fernandez

Abhinav Somaraju

Muhammad Asim

Sahil Sharma

Jaime Gutierrez

Domingo Gomez

Martina Brachmann

Amit Soni

A wireless node for use in a network of wireless nodes, for performing a localization to determine a location of a mobile device based on respective beacon signals transmitted wirelessly between the mobile device and each of a plurality of the wireless nodes. The first wireless node is configured to: wirelessly transmit or receive the respective beacon signal for use in determining the location of the mobile device; and wirelessly transmit information vouching for one or more others of the wireless nodes as being trusted for use in the localization. This information is transmitted to a device performing the localization (e.g. the mobile device), for use in identifying one or more rogue versions of said wireless nodes.

Localization based on network of wireless nodes

A first plurality () of network nodes (--) of a network () is associated with a first cryptographic keying material and the multicast IP address. A second plurality () of network nodes (--) of the network () is associated with a second cryptographic keying material and the multicast IP address. The first cryptographic keying material has a different secret than the second cryptographic keying material.

Secure group communication

Disclosed are systems and methods for cloud-based monitoring and control of physical environments. In various embodiments, a computing device () seeking to verify credentials of a lighting system controller () may obtain unverified credentials of the lighting system controller. The computing device may transmit, to a first remote device via a first network communication channel, a request to verify the unverified credentials. The computing device may receive verification from the first remote device or a second remote device via a second network communication channel. The second network communication channel may be different than the first network communication channel. The computing device may compare the unverified credentials to the verification data and verify, based on the comparing, that the unverified credentials are legitimate. Based on the verification, the computing device may establish a lighting information communication channel between the computing device and the lighting system controller.

Systems and methods for verifying credentials

An electronic network device () and an electronic configurator device () for provisioning the network device. The network device is configured to send a public key to configurator device () over an established first wireless () connection, and to receive encrypted credentials wirelessly from the configurator device. The configurator device is configured to receiving the public key over the established first wireless connection, to send credentials wirelessly encrypted with the public key to the network device over the established first wireless connection.

Electronic network device

In one aspect, a mobile device is located using a signal sent out from the mobile device to nodes of a location network, and the mobile device also sends a tracking preference associated with the signal. This specifies whether a location network is permitted to use the signal to determine the mobile's location, and/or whether a provider of a location related service associated with a location network is permitted to make use of the location. In embodiments the preference may be tagged with the ID of a particular provider. In another aspect, the localization is based on measurements taken by a mobile terminal of signals sent from the nodes, and the nodes also send out an identifier with the signal identifying a provider of a location related service associated with the network. The mobile device can then use this identifier to determine who to share its measurements or location with.

Controlling localization

A system () for protecting location information has beacons (), a provider server () for providing at least one location based service, a location server () and mobile devices (). The mobile device has a location engine () for controlling the location information and a location based application () for using the location information. The provider server generates unique data and authorizes the location based application, and subsequently provides location based services in dependence on an encrypted location. The location server determines the location based on a property of the radiation and encrypts the location. The location engine obtains a verification of customer data of the location based application, which indicates that use rights allow transfer of the location information to the location based application, and upon obtaining the verification transfers the encrypted location to the location based application. The location based application is authorized by the provider server, processes the encrypted location and uses the location based service.

System for protecting location information

A method of testing a sensor unit which detects, locally at the sensor unit, whether a person appears in the images it captures. The method comprises causing a light-emitting device (e.g. screen of a user terminal) to emit a test pattern toward the sensor unit to be captured over a series of images, the test pattern comprising a spatio-temporal pattern of light simulating presence of a predetermined number of people. The method further comprises, at a processing apparatus external to the sensor unit, receiving one or more presence detection reports from the sensor unit indicating an apparent people count detected using the sensor unit when subject to the test pattern. The apparent people count is then compared with the predetermined number of people simulated by the test pattern. Based on this comparison, it is determining whether the sensor unit is functioning correctly.

People sensing system

An electronic random number generating device () for generating a sequence of random numbers, the electronic random number generating device comprising an electronic parameter storage () configured to store multiple functions and for each function of the multiple functions an associated modulus, not all moduli being equal, and an electronic function evaluation device () configured to generate an internal sequence of random numbers, the function evaluation device being configured to generate a next number in the internal sequence of random numbers by for each function of the multiple functions, evaluating the function for a previously generated value in the internal sequence of random numbers modulo the modulus associated with the evaluating function, so obtaining multiple evaluation results, and applying a combination function to the multiple evaluation results to obtain the next number in the internal sequence, and an output () configured to generate a next number in the sequence of random numbers from the generated next number in the internal sequence.

Random number generator and stream cipher

A method of determining a location of a mobile device based on a first location estimation performed using a first location system, the method comprising: obtaining an initial estimate of the mobile device's location based on a second location estimation that is coarser than the first location estimation; using the initial estimate to select a subset of the reference nodes of the first network that are within a defined vicinity of the mobile device's location; and from amongst a database of respective assistance data for each of the wireless reference nodes stored on a server of the first location system, selectively providing the respective assistance data for each of said subset of wireless reference nodes to a localization module on the mobile device, for the localization module of the mobile device to calculate a finer estimate of the mobile device's location.

Localization of a mobile device

The present invention relates to a method for access decision evaluation in a building automation and control system, the method comprising: sending, from an accessing device () to an accessed device (), an access request, sending, from the accessed device () to a central decision evaluation apparatus (), an evaluation request asking if the access request is granted or denied, evaluating, at the central decision evaluation apparatus (), the evaluation request using one or more central access control policies in order to reach a decision on if the access request is granted or denied, deriving, at the central decision evaluation apparatus (), the one or more central access control policies that was used for evaluation into a device specific access policy, sending, from the central decision evaluation apparatus () to the accessed device (), the decision and the device specific access policy, and storing, at the accessed device (), the device specific access policy.

System and method for access decision evaluation for building automation and control systems

The disclosure relates to a lighting system which can be controlled from a wireless device in dependence on complying with an access rule that the wireless device is determined to be within in a spatial region associated with the lighting system. The disclosure provides apparatus for securing against the lighting system being controlled from a device located outside the relevant region via a rogue relay device located in that region. The apparatus comprises a user location module configured to determine user location information indicative of whether a user is accompanying the wireless device in the region associated with the lighting system, and an access module which is configured with a further access rule: that it does not allow the control of the lighting system by the wireless device if the user location information is indicative of the wireless device being unaccompanied by a user.

Control of a lighting system

A network device () is provided which is configured to determine a shared cryptographic key of key length (b) bits shared with a second network device () from a polynomial and an identity number of the second network device. A reduction algorithm is used to evaluate the polynomial in the identity number of the second network device and reduce module a public modulus and modulo a key modulus. The reduction algorithm comprises an iteration over the terms of the polynomial. In at least the iteration which iteration is associated with a particular term of the polynomial are comprised a first and second multiplication. The first multiplication is between the identity number and a least significant part of the coefficient of the particular term obtained from the representation of the polynomial, the least significant part of the coefficient being formed by the key length least significant bits of the coefficient of the particular term. The second multiplication is between a second multiplication between the identity number and a further part of the coefficient of the particular term obtained from the representation of the polynomial, the further part of the coefficient being formed by bits of the coefficient of the particular term different from the key length least significant bits, the further part and the least significant part together forming strictly fewer bits than in the coefficient of the particular term of the polynomial.

Network device configured to derive a shared key

A wireless device comprising: a wireless interface for communicating with a network of reference nodes, and a location module configured to obtain a measurement of a respective signal communicated between the wireless interface and each of a plurality of said reference nodes. The location module is also supplied with a respective set of transformed coordinates for each of said plurality of reference nodes, transformed relative to their actual physical coordinates. Using said signal measurements and the transformed coordinates of said plurality of reference nodes, the wireless device then submits information indicative of a transformed location of the wireless device to an interpretation function. Based on the interpretation function, the wireless device is thereby able to access functionality relating to the physical location of the mobile terminal.

Positioning system for determining the location of a device

A method of configuring a network device for key sharing and a method for a first network device to determine a shared key are provided. The method of configuring uses a private modulus (p) a public modulus (N), and a bivariate polynomial (f) having integer coefficients, the binary representation of the public modulus and the binary representation of the private modulus are the same in at least key length (b) consecutive bits. Local key material for a network device is generated by substituting an identity number into the bivariate polynomial and reducing modulo the private modulus the result of the substitution to obtain a univariate polynomial. Security may be increased by adding () one or more obfuscating numbers to coefficients of the univariate polynomial to obtain an obfuscated univariate polynomial. In a use phase, the network device determines a shared cryptographic key, by substituting () the identity number of another network device into the univariate polynomial and reducing modulo the public modulus and reducing modulo a key modulus.

Growing community of inventors

Waalre, Netherlands

Sandeep Shankaran Kumar